This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/HuqUSWno2Gq8ydDwJRx6QWJXGos.roa File: HuqUSWno2Gq8ydDwJRx6QWJXGos.roa (raw, json) Hash identifier: q4XX35euMg6p42HeT4nudKvSOjx2VhLuyQAvC+XXuNE= Subject key identifier: 1E:EA:94:49:69:E8:D8:6A:BC:C9:D0:F0:25:1C:7A:41:62:57:1A:8B Certificate issuer: /CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0 Certificate serial: 019B7BA4CA69DEACD67EF2CB0CE1536E69B5 Authority key identifier: 47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/HuqUSWno2Gq8ydDwJRx6QWJXGos.roa Signing time: Thu 01 Jan 2026 22:19:15 +0000 ROA not before: Thu 01 Jan 2026 22:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 185.45.108.0/23 maxlen: 23 2a02:22f0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 13:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:ca:69:de:ac:d6:7e:f2:cb:0c:e1:53:6e:69:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0 Validity Not Before: Jan 1 22:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1eea944969e8d86abcc9d0f0251c7a4162571a8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e2:b9:4b:31:49:81:00:05:0a:8a:84:9f:c0: 97:7f:5c:05:1f:f5:20:b5:c9:1e:30:23:fb:2a:37: 9a:af:65:00:b7:09:af:2d:80:b8:4d:69:89:b2:bb: 60:dd:30:f7:9d:0d:f1:7d:ba:89:71:0c:4f:63:05: 58:0d:30:0e:07:cd:f9:ea:ae:63:13:11:41:d8:18: 7a:33:c8:1b:44:6b:d8:a8:97:29:f6:94:7c:6d:62: ed:1f:69:68:d3:64:23:c1:99:e2:44:0f:86:33:85: 88:4b:e3:e5:62:d0:ac:d8:b1:f8:52:4d:b3:d8:1b: cf:19:ef:ca:37:63:a5:c2:6b:1a:1c:a4:17:39:83: d5:1d:2a:bc:40:a9:42:8b:92:09:2a:d2:7d:94:45: c7:cf:7e:82:58:e0:1d:e8:dc:18:15:fb:ed:e6:25: 03:d0:45:c1:f3:df:c9:5a:e8:d5:94:0a:3c:70:c5: 84:50:b3:8a:73:d9:6d:0b:b9:1d:0b:77:28:b2:0c: 23:26:e3:d4:cd:a7:e3:b4:13:d3:46:51:46:87:27: ec:d2:e8:43:da:cc:aa:03:7d:5f:61:e6:3b:ec:bb: fa:ca:89:eb:41:d3:e9:c6:52:02:10:29:64:94:e3: 94:9a:0f:75:cf:69:63:d8:b2:e8:ed:52:e2:ac:e6: 47:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:EA:94:49:69:E8:D8:6A:BC:C9:D0:F0:25:1C:7A:41:62:57:1A:8B X509v3 Authority Key Identifier: keyid:47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/HuqUSWno2Gq8ydDwJRx6QWJXGos.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.45.108.0/23 IPv6: 2a02:22f0::/32 Signature Algorithm: sha256WithRSAEncryption 60:d5:92:21:f1:a9:76:f1:cf:81:28:88:dc:86:6a:00:84:84: d1:3f:3e:f6:a6:6b:93:4f:bb:45:93:c0:b9:bb:a1:69:62:26: bd:7c:a2:b4:1f:d2:3e:c1:e1:7d:31:8f:14:2b:b7:44:25:62: 9b:4a:0f:8a:59:53:d5:11:75:95:82:5d:7d:82:10:67:39:ac: bd:42:45:54:06:ad:93:6d:ef:f8:9f:bd:70:98:8c:55:90:8a: 66:f5:06:56:7f:98:46:e2:af:ef:4b:8d:66:11:17:b3:de:43: df:e3:db:07:31:21:d8:89:34:af:36:15:8b:72:b4:69:e9:b3: 36:7f:62:c2:90:b7:1e:80:e2:93:3b:5b:93:d3:31:70:1c:d4: bb:fe:4f:09:ac:8c:e2:4f:20:02:75:19:90:21:9e:8f:a5:7b: 7b:13:44:99:97:4c:c0:0b:25:e6:a2:c7:59:31:7f:82:dd:71: 3c:0e:d6:1e:59:2e:c1:ba:f9:3c:ae:bc:dc:6a:8a:36:69:cf: d6:01:79:a6:f0:b8:95:dd:24:ad:8b:37:6d:da:22:f1:c5:17: 0e:58:f2:da:c6:31:f5:73:fd:38:de:b4:c2:25:5c:ba:d1:4e: 67:e7:2a:89:78:3b:8b:78:43:b4:58:7f:54:33:a2:51:8a:e8: 1b:b2:6d:c8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7pMpp3qzWfvLLDOFTbmm1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NjZjNmQ5YWQyMWNkNDExOGEwNDQ4MjY0ZDZmYjM1ZDU1 ZjE0YzAwHhcNMjYwMTAxMjIxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZWVhOTQ0OTY5ZThkODZhYmNjOWQwZjAyNTFjN2E0MTYyNTcxYThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquK5SzFJgQAFCoqEn8CXf1wFH/Ug tckeMCP7Kjear2UAtwmvLYC4TWmJsrtg3TD3nQ3xfbqJcQxPYwVYDTAOB8356q5j ExFB2Bh6M8gbRGvYqJcp9pR8bWLtH2lo02QjwZniRA+GM4WIS+PlYtCs2LH4Uk2z 2BvPGe/KN2OlwmsaHKQXOYPVHSq8QKlCi5IJKtJ9lEXHz36CWOAd6NwYFfvt5iUD 0EXB89/JWujVlAo8cMWEULOKc9ltC7kdC3cosgwjJuPUzafjtBPTRlFGhyfs0uhD 2syqA31fYeY77Lv6yonrQdPpxlICEClklOOUmg91z2lj2LLo7VLirOZH6wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFB7qlElp6NhqvMnQ8CUcekFiVxqLMB8GA1UdIwQY MBaAFEdmxtmtIc1BGKBEgmTW+zXVXxTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjJiRzJhMGh6VUVZb0VTQ1pOYjdOZFZmRk1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi80MWRjNzUtMWYzMi00ZWRkLWE5NGMt ZjVlYzQwM2ZkYWNmLzEvSHVxVVNXbm8yR3E4eWREd0pSeDZRV0pYR29zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi80MWRjNzUtMWYzMi00ZWRkLWE5NGMtZjVlYzQwM2ZkYWNm LzEvUjJiRzJhMGh6VUVZb0VTQ1pOYjdOZFZmRk1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuS1sMA0E AgACMAcDBQAqAiLwMA0GCSqGSIb3DQEBCwUAA4IBAQBg1ZIh8al28c+BKIjchmoA hITRPz72pmuTT7tFk8C5u6FpYia9fKK0H9I+weF9MY8UK7dEJWKbSg+KWVPVEXWV gl19ghBnOay9QkVUBq2Tbe/4n71wmIxVkIpm9QZWf5hG4q/vS41mERez3kPf49sH MSHYiTSvNhWLcrRp6bM2f2LCkLcegOKTO1uT0zFwHNS7/k8JrIziTyACdRmQIZ6P pXt7E0SZl0zACyXmosdZMX+C3XE8DtYeWS7Buvk8rrzcaoo2ac/WAXmm8LiV3SSt izdt2iLxxRcOWPLaxjH1c/043rTCJVy60U5n5yqJeDuLeEO0WH9UM6JRiugbsm3I -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:03 2026 by rpki-client